CVE-2023-53947: OCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege Escalation
OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53947?
CVE-2023-53947 has a high severity rating due to its potential for local privilege escalation.
How do I fix CVE-2023-53947?
To fix CVE-2023-53947, ensure that the service paths in OCS Inventory NG are properly quoted to prevent unauthorized execution.
Who is affected by CVE-2023-53947?
CVE-2023-53947 affects all installations of OCS Inventory NG version 2.3.0.0.
What are the potential consequences of CVE-2023-53947?
Exploitation of CVE-2023-53947 allows local attackers to gain system-level privileges, potentially leading to further system compromise.
Is there a patch available for CVE-2023-53947?
A patch for CVE-2023-53947 may be included in future updates from OCS Inventory NG, so it's critical to monitor software releases for fixes.